Sakrivene reklame na contractor.rs

[1van]

Detektovano u još u martu, server Loopia: https://twitter.com/ivanmarkovicsec/stat...4906699776. 

Code:

<div name="LcOkne" id="FQfMnG">

<a href="http://www.atleticoarezzo.it/">UGG Saldi</a>
<a href="http://www.associazionespazzavento.it/">Stivali UGG</a>
<a href="http://www.agendacultura.it/">UGG Saldi</a>
<a href="http://www.rumeniinitalia.it/">UGG Outlet</a>
<a href="http://www.anspilecce.it">Stivali UGG</a>
<a href="http://www.montanolucino-ut.it">UGG Outlet</a>
<a href="http://www.mtdirectionsk.it">Stivali UGG</a>
<a href="http://www.bkvietnam.dk/">UGG Sko</a>
<a href="http://www.altieco.dk/">UGG Australia</a>
<a href="http://www.vinboden.dk">Billige UGG</a>

<a href="/teletext/ralph-lauren-vaska.html" title="ralph lauren väska">ralph lauren väska</a>
<a href="/teletext/ralph-lauren-skjorta.html" title="ralph lauren skjorta">ralph lauren skjorta</a>
<a href="/teletext/ralph-lauren-jacka-herr.html" title="ralph lauren jacka herr">ralph lauren jacka herr</a>
<a href="/teletext/ralph-lauren-parfym-dam.html" title="ralph lauren parfym dam">ralph lauren parfym dam</a>
<a href="/teletext/polo-ralph-lauren-skor.html" title="polo ralph lauren skor">polo ralph lauren skor</a>
<a href="/teletext/ralph-lauren-skjorta-dam.html" title="ralph lauren skjorta dam">ralph lauren skjorta dam</a>

</div><script language="JavaScript">var _0x6977=["\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x73\x74\x79\x6C\x65","\x46\x51\x66\x4D\x6E\x47","\x64\x69\x73\x70\x6C\x61\x79","\x6E\x6F\x6E\x65"];document[_0x6977[0]](_0x6977[2])[_0x6977[1]][_0x6977[3]]=_0x6977[4]</script>
</body>

Code:

De-obfuscated code: var _0x6977 = ["getElementById", "style", "FQfMnG", "display", “none"];

Whois:

Registrant: Contractor D.O.O.
Address: Brdjanska 458, Ripanj, Beograd, Srbija
Registration number: 07487436
Tax ID (PIB): 101745588
Administrative contact: Ilmak D.O.O.
Address: Cincar Jankova 7, Beograd, Srbija
Technical contact: Loopia d.o.o.
Address: Obrenovićeva 46, TPC KALČA C1/72, Nis, Srbija
Registration number: 17503626